Re: ssh defeats the firewall

[Jochen Kaiser <Jochen.Kaiser@rrze.uni-erlangen.de>]

On Thu, Apr 20, 2000 at 04:17:15PM -0400, Tony Iannotti wrote:
> On Thu, 20 Apr 2000, David Lang wrote:
> 
> > -----BEGIN PGP SIGNED MESSAGE-----
> > 
> > This is exactly the reason why I do not allow SSH through the firewalls I
> > manage.
> 
>   You can control that if you can work in concert with the box admins. 
> Sshd can be configured not to tunnel, if all you need to support is a
> telnet replacement. Of course, you have to trust the box admins..... 
> 
huh? just start it as an user level process.

again: security by obscurity. evil.

with kind regards,
Jochen Kaiser
-
[To unsubscribe, send mail to majordomo@lists.gnac.net with
"unsubscribe firewalls" in the body of the message.]